Tag: jack

  • The Register: Mobsters now overlap with cybercrime gangs and use AI for evil, Europol warns

    Source URL: https://www.theregister.com/2025/03/24/modern_mafiosos_wield_ai/ Source: The Register Title: Mobsters now overlap with cybercrime gangs and use AI for evil, Europol warns Feedly Summary: PLUS: Russian bug-buyers seeks Telegram flaws; Another WordPress security mess; NIST backlog grows; and more! Infosec In Brief Organized crime networks are now reliant on digital tech for most of their activities according…

  • ISC2 Think Tank: The Evolution of Email Threats: How Social Engineering is Outsmarting Traditional Defenses

    Source URL: https://www.isc2.org/professional-development/webinars/thinktank Source: ISC2 Think Tank Title: The Evolution of Email Threats: How Social Engineering is Outsmarting Traditional Defenses Feedly Summary: A staggering 74% of all breaches involve the human element, proving that cybercriminals are relentlessly exploiting users through sophisticated email-based social engineering attacks. While organizations have invested in email authentication, advanced threat detection,…

  • The Register: ‘Dead simple’ hijacking hole in Apache Tomcat ‘now actively exploited in the wild’

    Source URL: https://www.theregister.com/2025/03/18/apache_tomcat_java_rce_flaw/ Source: The Register Title: ‘Dead simple’ hijacking hole in Apache Tomcat ‘now actively exploited in the wild’ Feedly Summary: One PUT request, one poisoned session file, and the server’s yours A trivial flaw in Apache Tomcat that allows remote code execution and access to sensitive files is said to be under attack…

  • Hacker News: Strengthening AI Agent Hijacking Evaluations

    Source URL: https://www.nist.gov/news-events/news/2025/01/technical-blog-strengthening-ai-agent-hijacking-evaluations Source: Hacker News Title: Strengthening AI Agent Hijacking Evaluations Feedly Summary: Comments AI Summary and Description: Yes Summary: The text outlines security risks related to AI agents, particularly focusing on “agent hijacking,” where malicious instructions can be injected into data handled by AI systems, leading to harmful actions. The U.S. AI Safety…

  • Rekt: Not So Safe

    Source URL: https://www.rekt.news/not-so-safe Source: Rekt Title: Not So Safe Feedly Summary: North Korea’s Lazarus Group stole $1.4B from Bybit’s signers by exploiting a simple vulnerability in Safe’s system. A single yaml.load execution bypassed high-end security, turning a supposedly impenetrable system into one of the industry’s biggest disasters. AI Summary and Description: Yes Summary: The text…

  • Cloud Blog: Ghost in the Router: China-Nexus Espionage Actor UNC3886 Targets Juniper Routers

    Source URL: https://cloud.google.com/blog/topics/threat-intelligence/china-nexus-espionage-targets-juniper-routers/ Source: Cloud Blog Title: Ghost in the Router: China-Nexus Espionage Actor UNC3886 Targets Juniper Routers Feedly Summary: Written by: Lukasz Lamparski, Punsaen Boonyakarn, Shawn Chew, Frank Tse, Jakub Jozwiak, Mathew Potaczek, Logeswaran Nadarajan, Nick Harbour, Mustafa Nasser Introduction In mid 2024, Mandiant discovered threat actors deployed custom backdoors on Juniper Networks’ Junos…

  • Hacker News: Show HN: Factorio Learning Environment – Agents Build Factories

    Source URL: https://jackhopkins.github.io/factorio-learning-environment/ Source: Hacker News Title: Show HN: Factorio Learning Environment – Agents Build Factories Feedly Summary: Comments AI Summary and Description: Yes Summary: The text introduces the Factorio Learning Environment (FLE), an innovative evaluation framework for Large Language Models (LLMs), focusing on their capabilities in long-term planning and resource optimization. It reveals gaps…

  • Simon Willison’s Weblog: Politico: 5 Questions for Jack Clark

    Source URL: https://simonwillison.net/2025/Mar/8/questions-for-jack-clark/ Source: Simon Willison’s Weblog Title: Politico: 5 Questions for Jack Clark Feedly Summary: Politico: 5 Questions for Jack Clark I tend to ignore statements with this much future-facing hype, especially when they come from AI labs who are both raising money and trying to influence US technical policy. Anthropic’s Jack Clark has…

  • Unit 42: Multiple Vulnerabilities Discovered in a SCADA System

    Source URL: https://unit42.paloaltonetworks.com/vulnerabilities-in-iconics-software-suite/ Source: Unit 42 Title: Multiple Vulnerabilities Discovered in a SCADA System Feedly Summary: We identified multiple vulnerabilities in ICONICS Suite, SCADA software used in numerous OT applications. This article offers a technical analysis of our findings. The post Multiple Vulnerabilities Discovered in a SCADA System appeared first on Unit 42. AI Summary…